This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
File:                     dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft (raw, json)
Hash identifier:          jkfcfQQx4y0tZ4A5VL3/XX+uh+f6MhjCQgDnHnF7wFs=
Subject key identifier:   84:AB:12:39:F4:79:6B:0B:B2:A0:59:3E:8F:C1:09:EF:E8:8F:FF:5E
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Certificate issuer:       /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial:       019BF79AC39681B0542F99B25C0C248A4A8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
Manifest number:          0DB1
Signing time:             Mon 26 Jan 2026 00:01:13 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:13 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:13 +0000
Files and hashes:         1: Ki5vJms-JWVXQqNHEorfbuz5XjI.roa (hash: 5AUIEMOenxKdLyL4gm/joj3B8MRPpzoFh4cs7HPB6rs=)
                          2: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl (hash: Wl0HaBy/qe4VBKtU4J8tvBif9IuZpLALSuXjLR2izic=)
                          3: mwVyEN1yciChxmW_Q0x3K-DTLf0.roa (hash: 2DWQTjsCCu0McKSPCWKJ9eLeJdWuKpAg3qQ7vPTXYnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:c3:96:81:b0:54:2f:99:b2:5c:0c:24:8a:4a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
        Validity
            Not Before: Jan 26 00:01:13 2026 GMT
            Not After : Jan 27 00:01:13 2026 GMT
        Subject: CN=84ab1239f4796b0bb2a0593e8fc109efe88fff5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:e4:f9:f2:ed:c8:26:9f:b8:26:d2:20:76:
                    82:b1:bb:11:d0:64:90:18:f8:ce:4b:ec:18:8c:a3:
                    29:dc:cd:74:b6:77:ac:a8:aa:ae:bc:ca:b3:04:5a:
                    43:53:8f:c7:fd:8c:21:75:3f:ff:1b:07:3e:c6:10:
                    7f:34:73:ea:92:d2:b0:5f:62:a0:2e:24:6e:ee:4f:
                    e7:8d:5b:0c:7c:a7:dd:53:71:96:88:5d:6a:4c:14:
                    11:08:61:7b:a7:44:a8:a6:7b:a0:d9:23:80:a3:2c:
                    b8:7a:3e:91:03:1e:fe:3b:96:46:64:b6:10:d7:bf:
                    81:b4:4c:78:fe:dc:0d:14:83:e0:9d:d5:5d:12:b0:
                    4b:8b:8c:f1:07:16:ad:4a:df:81:a3:b7:a1:45:39:
                    7a:54:b4:59:7f:9f:1b:de:eb:8a:a7:f9:85:3d:0e:
                    6d:e5:bb:89:40:6d:b4:0e:d2:4c:5d:6e:eb:97:51:
                    09:b9:9d:ea:48:b2:25:51:e3:f1:1e:a8:ad:bd:96:
                    67:05:21:e7:db:60:bd:7c:d8:ce:16:06:c2:08:e8:
                    96:67:31:8d:ca:6a:a3:54:11:36:e7:77:fb:19:e6:
                    c4:d4:3c:19:23:b1:44:7e:2b:ce:b0:9c:f2:b0:e0:
                    6c:23:a2:a0:69:76:9e:52:97:a7:e3:5c:dc:e1:e0:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AB:12:39:F4:79:6B:0B:B2:A0:59:3E:8F:C1:09:EF:E8:8F:FF:5E
            X509v3 Authority Key Identifier:
                keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8b:39:e5:a0:b5:4b:42:8d:44:75:5f:61:a7:a8:76:95:e6:
         a5:11:0a:70:58:43:8e:26:e4:95:84:15:99:dd:45:bc:a1:95:
         d5:f7:c3:dc:58:cc:80:e9:9d:28:d7:2d:e4:57:8c:41:34:58:
         e3:97:cc:30:5a:1b:8e:83:9b:9d:5a:6f:a9:71:2a:6e:24:0b:
         3b:62:65:02:a6:3f:ca:e3:c7:1d:f9:67:b7:d4:8b:3b:86:8f:
         9d:37:47:dd:e4:4c:5a:52:86:64:38:31:57:0e:b1:d9:1c:a7:
         69:cc:24:19:63:d0:47:e0:f7:08:2c:3e:83:31:55:18:9d:ba:
         65:38:c8:5e:6c:b7:58:72:f3:06:a2:84:a0:ef:66:5b:c8:f2:
         35:49:11:24:d8:4c:2a:be:c2:48:33:30:83:cf:85:82:d5:0c:
         a4:40:8f:9e:de:aa:55:0f:91:e3:b2:87:dd:1e:55:4b:25:b3:
         9b:8c:5f:59:3c:42:1b:1e:a2:53:13:13:a3:f7:2d:71:f4:f7:
         34:ca:a6:66:0d:c7:12:eb:37:df:4e:aa:8e:6a:4e:34:93:8c:
         5f:a3:3b:81:1f:d6:fb:12:1d:53:92:31:57:ce:e3:98:20:1c:
         90:83:76:c8:f1:a6:32:c7:9e:33:3a:39:42:87:2b:27:07:ae:
         3d:33:62:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3msOWgbBUL5myXAwkikqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MzA5YWEwMTQ4Y2M5MGZjZWQ5OTQzZWIxYTgxOTQ2ZTlh
ZGFlNWUwHhcNMjYwMTI2MDAwMTEzWhcNMjYwMTI3MDAwMTEzWjAzMTEwLwYDVQQD
Eyg4NGFiMTIzOWY0Nzk2YjBiYjJhMDU5M2U4ZmMxMDllZmU4OGZmZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKbk+fLtyCafuCbSIHaCsbsR0GSQ
GPjOS+wYjKMp3M10tnesqKquvMqzBFpDU4/H/YwhdT//Gwc+xhB/NHPqktKwX2Kg
LiRu7k/njVsMfKfdU3GWiF1qTBQRCGF7p0Sopnug2SOAoyy4ej6RAx7+O5ZGZLYQ
17+BtEx4/twNFIPgndVdErBLi4zxBxatSt+Bo7ehRTl6VLRZf58b3uuKp/mFPQ5t
5buJQG20DtJMXW7rl1EJuZ3qSLIlUePxHqitvZZnBSHn22C9fNjOFgbCCOiWZzGN
ymqjVBE253f7GebE1DwZI7FEfivOsJzysOBsI6KgaXaeUpen41zc4eBsrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISrEjn0eWsLsqBZPo/BCe/oj/9eMB8GA1UdIwQY
MBaAFHQwmqAUjMkPztmUPrGoGUbpra5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODct
N2M3NDBlZjhhYTk1LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODctN2M3NDBlZjhhYTk1
LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYs55aC1
S0KNRHVfYaeodpXmpREKcFhDjibklYQVmd1FvKGV1ffD3FjMgOmdKNct5FeMQTRY
45fMMFobjoObnVpvqXEqbiQLO2JlAqY/yuPHHflnt9SLO4aPnTdH3eRMWlKGZDgx
Vw6x2RynacwkGWPQR+D3CCw+gzFVGJ26ZTjIXmy3WHLzBqKEoO9mW8jyNUkRJNhM
Kr7CSDMwg8+FgtUMpECPnt6qVQ+R47KH3R5VSyWzm4xfWTxCGx6iUxMTo/ctcfT3
NMqmZg3HEus3306qjmpONJOMX6M7gR/W+xIdU5IxV87jmCAckIN2yPGmMseeMzo5
QocrJweuPTNijA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:55:44 2026 by rpki-client